@stim-cli/core 1.15.0 → 1.16.0

package/dist/state.mjs

@@ -1,12 +1,276 @@
 import { _ as releaseClaim, f as isClaimRefusal, g as readClaimSet, x as tryAcquireClaim } from "./ownership-claim-O31Y5iIb.mjs";
 import { inspectProcessIdentity } from "./process-identity.mjs";
-import { C as workspaceStateDir, h as rotatedLogPath, j as withDirLock, l as configDir, x as workspaceName } from "./core-BwaxUjLX.mjs";
-import { closeSync, existsSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, statSync } from "node:fs";
+import { C as workspaceStateDir, h as rotatedLogPath, j as withDirLock, l as configDir, x as workspaceName } from "./core-DWOUn9xp.mjs";
+import { closeSync, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, statSync } from "node:fs";
 import { availableParallelism, homedir, loadavg } from "node:os";
 import { basename, dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
 import { createHash } from "node:crypto";
+import { isIP } from "node:net";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { StringDecoder } from "node:string_decoder";
+//#region state/agent-actions.ts
+const EVENTS_VERSION = 1;
+function object$1(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function parseAgentEvents(lines) {
+	const events = [];
+	const started = [];
+	const finished = [];
+	let session = null;
+	let unknownVersion = null;
+	for (const line of lines) {
+		let entry;
+		try {
+			entry = object$1(JSON.parse(line));
+		} catch {
+			continue;
+		}
+		if (!entry) continue;
+		const ts = typeof entry.ts === "string" ? Date.parse(entry.ts) : NaN;
+		if (entry.version !== EVENTS_VERSION) {
+			unknownVersion ??= {
+				version: entry.version,
+				ts: Number.isFinite(ts) ? ts : null
+			};
+			continue;
+		}
+		if (typeof entry.session === "string") session ??= entry.session;
+		const { kind, command, summary } = entry;
+		const requestId = typeof entry.requestId === "string" ? entry.requestId : null;
+		if (kind === "request.started" && requestId && Number.isFinite(ts)) started.push([requestId, ts]);
+		if (kind !== "action.recorded" && kind !== "request.finished") continue;
+		const failed = kind === "request.finished" && entry.status === "error";
+		if (kind === "request.finished" && !failed) {
+			if (requestId) finished.push(requestId);
+			continue;
+		}
+		if (!Number.isFinite(ts) || typeof entry.session !== "string" || typeof command !== "string") continue;
+		if (typeof summary !== "string") continue;
+		events.push({
+			ts,
+			session: entry.session,
+			kind,
+			command,
+			summary,
+			failed,
+			details: object$1(entry.details),
+			requestId
+		});
+	}
+	return {
+		events,
+		started,
+		finished,
+		session,
+		unknownVersion
+	};
+}
+const RUNNER_DEVICE = /-destination\s+"?platform=iOS Simulator,id=([^",\s]+)|AgentDeviceRunner\.env\.session-(.+?)-owner-/;
+const LOG_TIME = /^(\d{4}-\d{2}-\d{2}) (\d{2}:\d{2}:\d{2})(\.\d+)?([+-]\d{2})?(\d{2})?\b/;
+function logTime(line) {
+	const match = LOG_TIME.exec(line);
+	if (!match) return null;
+	const [, date, time, fraction = "", offsetHours, offsetMinutes] = match;
+	const offset = offsetHours && offsetMinutes ? `${offsetHours}:${offsetMinutes}` : "";
+	const at = Date.parse(`${date}T${time}${fraction.slice(0, 4)}${offset}`);
+	return Number.isFinite(at) ? at : null;
+}
+function parseRunnerSpans(text) {
+	const spans = [];
+	let pending = null;
+	for (const line of text.split("\n")) {
+		const device = RUNNER_DEVICE.exec(line);
+		if (device) {
+			pending = device[1] ?? device[2] ?? null;
+			continue;
+		}
+		if (pending === null) continue;
+		const at = logTime(line);
+		if (at === null) continue;
+		if (spans.at(-1)?.deviceId !== pending) spans.push({
+			deviceId: pending,
+			from: spans.length ? at : -Infinity
+		});
+		pending = null;
+	}
+	return spans;
+}
+function sessionSpans(runner, closes) {
+	return runner.map((span, i) => {
+		const previous = runner[i - 1]?.from ?? -Infinity;
+		const close = closes.findLast((at) => at > previous && at < span.from);
+		return close === void 0 ? span : {
+			...span,
+			from: close + 1
+		};
+	});
+}
+function spanDevice(spans, ts) {
+	let device = null;
+	for (const span of spans) if (span.from <= ts) device = span.deviceId;
+	return device;
+}
+function platformOf(event) {
+	const platform = event.details?.platform;
+	return platform === "ios" || platform === "android" ? platform : void 0;
+}
+function agentRecord(event, deviceId, target, startedAt) {
+	return {
+		ts: event.ts,
+		...startedAt !== void 0 && startedAt <= event.ts ? { startedAt } : {},
+		src: "agent",
+		level: event.failed ? "error" : "info",
+		msg: event.summary,
+		event: event.failed ? "agent_failed" : "agent_action",
+		command: event.command,
+		session: event.session,
+		...target.platform ? { platform: target.platform } : {},
+		...deviceId ? { deviceId } : {},
+		...target.slot === "default" ? {} : { slot: target.slot },
+		...event.details ? { details: event.details } : {}
+	};
+}
+function formatUnknownRecord(session, unknown, target, now) {
+	return {
+		ts: unknown.ts ?? now,
+		src: "agent",
+		level: "warn",
+		msg: `agent-device session ${session} records events in an unrecognized format (version ${JSON.stringify(unknown.version) ?? "missing"}); its actions are not shown.`,
+		event: "agent_format_unknown",
+		session,
+		...target.platform ? { platform: target.platform } : {},
+		...target.slot === "default" ? {} : { slot: target.slot }
+	};
+}
+function readCompleteLines(path, start) {
+	let fd;
+	try {
+		fd = openSync(path, "r");
+		const size = fstatSync(fd).size;
+		if (size <= start) return {
+			text: "",
+			next: start,
+			size
+		};
+		const buffer = Buffer.alloc(size - start);
+		const read = readSync(fd, buffer, 0, buffer.length, start);
+		const end = buffer.subarray(0, read).lastIndexOf(10);
+		return {
+			text: end < 0 ? "" : buffer.toString("utf8", 0, end + 1),
+			next: start + end + 1,
+			size
+		};
+	} catch {
+		return null;
+	} finally {
+		if (fd !== void 0) closeSync(fd);
+	}
+}
+/**
+* Reads agent-device session actions incrementally from the supplied sessions directories. With targets,
+* records are restricted to those devices; without targets, retained session metadata supplies attribution.
+* Missing directories and unreadable files yield no records.
+*/
+function createAgentActionReader({ sessionsDirs, targets, sinceTs = -Infinity, now = Date.now, claimedDevice = () => null }) {
+	const cursors = /* @__PURE__ */ new Map();
+	const byId = new Map(targets?.map((target) => [target.id, target]));
+	return () => {
+		if (targets && !targets.length) return [];
+		const sessionDirs = (typeof sessionsDirs === "function" ? sessionsDirs() : sessionsDirs).flatMap((sessionsDir) => {
+			try {
+				return readdirSync(sessionsDir).map((name) => ({
+					name,
+					sessionsDir,
+					dir: join(sessionsDir, name)
+				}));
+			} catch {
+				return [];
+			}
+		});
+		const out = [];
+		for (const { name, sessionsDir, dir } of sessionDirs) {
+			const eventsPath = join(dir, "events.ndjson");
+			const lines = [];
+			let cursor = cursors.get(dir);
+			if (!cursor) {
+				try {
+					if (statSync(eventsPath).mtimeMs < sinceTs) continue;
+				} catch {
+					continue;
+				}
+				cursor = {
+					offset: 0,
+					closes: [],
+					runner: null,
+					session: null,
+					unknownReported: false,
+					started: /* @__PURE__ */ new Map()
+				};
+				cursors.set(dir, cursor);
+				try {
+					lines.push(...readFileSync(`${eventsPath}.1`, "utf8").split("\n"));
+				} catch {}
+			}
+			let chunk = readCompleteLines(eventsPath, cursor.offset);
+			if (chunk && chunk.size < cursor.offset) chunk = readCompleteLines(eventsPath, 0);
+			if (!chunk) continue;
+			cursor.offset = chunk.next;
+			lines.push(...chunk.text.split("\n"));
+			const parsed = parseAgentEvents(lines);
+			for (const [requestId, at] of parsed.started) cursor.started.set(requestId, at);
+			cursor.session ??= parsed.session;
+			const session = cursor.session;
+			const matched = new Map(parsed.events.flatMap((event) => event.requestId && cursor.started.has(event.requestId) ? [[event.requestId, cursor.started.get(event.requestId)]] : []));
+			const failed = parsed.events.flatMap((event) => event.failed && event.requestId ? [event.requestId] : []);
+			for (const requestId of [...parsed.finished, ...failed]) cursor.started.delete(requestId);
+			for (const requestId of [...cursor.started.keys()].slice(0, -64)) cursor.started.delete(requestId);
+			if (!parsed.events.length && !parsed.unknownVersion) continue;
+			const runnerPath = join(dir, "runner.log");
+			let runnerSize = -1;
+			try {
+				runnerSize = statSync(runnerPath).size;
+			} catch {}
+			if (cursor.runner?.size !== runnerSize) {
+				let text = "";
+				try {
+					text = readFileSync(runnerPath, "utf8");
+				} catch {}
+				cursor.runner = {
+					size: runnerSize,
+					spans: parseRunnerSpans(text)
+				};
+			}
+			for (const event of parsed.events) if (event.command === "close" && !event.failed) cursor.closes.push(event.ts);
+			const spans = sessionSpans(cursor.runner.spans, cursor.closes);
+			const deviceAt = (ts) => spans.length ? spanDevice(spans, ts) : session && claimedDevice(session, sessionsDir);
+			cursor.platform ??= parsed.events.map(platformOf).find((platform) => platform !== void 0);
+			cursor.platform ??= spans.length ? "ios" : void 0;
+			const retainedTarget = () => ({
+				platform: cursor.platform,
+				slot: "default"
+			});
+			if (parsed.unknownVersion && !cursor.unknownReported) {
+				const deviceId = spans.at(-1)?.deviceId ?? (session && claimedDevice(session, sessionsDir));
+				const target = targets ? deviceId ? byId.get(deviceId) : void 0 : retainedTarget();
+				if (target) {
+					cursor.unknownReported = true;
+					out.push(formatUnknownRecord(session ?? name, parsed.unknownVersion, target, now()));
+				}
+			}
+			for (const event of parsed.events) {
+				if (event.ts < sinceTs) continue;
+				if (!targets) cursor.platform = platformOf(event) ?? cursor.platform;
+				const deviceId = !targets && cursor.platform === "android" ? null : deviceAt(event.ts);
+				const target = targets ? deviceId ? byId.get(deviceId) : void 0 : retainedTarget();
+				const startedAt = event.requestId ? matched.get(event.requestId) : void 0;
+				if (target) out.push(agentRecord(event, deviceId || null, target, startedAt));
+			}
+		}
+		return out.toSorted((a, b) => a.ts - b.ts);
+	};
+}
+//#endregion
 //#region state/json-file.ts
 const readScope = new AsyncLocalStorage();
 /**
@@ -49,6 +313,64 @@ function readJsonObject(path) {
 	}
 }
 //#endregion
+//#region state/agent-device-usage.ts
+function agentDeviceUsageFile() {
+	return join(configDir(), "agent-device-usage.json");
+}
+function readAgentDeviceUsageCache() {
+	const value = readJsonObject(agentDeviceUsageFile());
+	if (!value || value.version !== 1) return null;
+	const { roots, ...usage } = value;
+	if (!validUsage(usage) || !validRoots(roots)) return null;
+	return {
+		usage,
+		roots
+	};
+}
+function readAgentDeviceUsage() {
+	const value = readJsonObject(agentDeviceUsageFile());
+	if (!value) return null;
+	const { roots: _roots, ...usage } = value;
+	return validUsage(usage) ? usage : null;
+}
+function object(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function bytes(value) {
+	return value === null || typeof value === "number" && Number.isFinite(value) && value >= 0;
+}
+function sized(value) {
+	return object(value) && typeof value.dir === "string" && bytes(value.bytes);
+}
+function count$1(value) {
+	return typeof value === "number" && Number.isInteger(value) && value >= 0;
+}
+function nullableString(value) {
+	return value === null || typeof value === "string";
+}
+function validRoots(value) {
+	return object(value) && typeof value.stateDir === "string" && typeof value.runnerRoot === "string" && typeof value.hostedDir === "string" && Array.isArray(value.workspaceDirs) && value.workspaceDirs.every((dir) => typeof dir === "string");
+}
+function validUsage(value) {
+	const { stateDir: state, runnerBuilds: runner, workspaces, hosted } = value;
+	return value.version === 1 && typeof value.measuredAt === "string" && Number.isFinite(Date.parse(value.measuredAt)) && typeof value.bytes === "number" && bytes(value.bytes) && typeof value.complete === "boolean" && sized(state) && typeof state.present === "boolean" && sized(state.sessions) && count$1(state.sessions.count) && sized(state.logs) && object(state.other) && bytes(state.other.bytes) && Array.isArray(state.other.largest) && state.other.largest.every((entry) => object(entry) && typeof entry.name === "string" && bytes(entry.bytes)) && sized(runner) && typeof runner.present === "boolean" && bytes(runner.sharedBytes) && Array.isArray(runner.platforms) && runner.platforms.every((platform) => sized(platform) && typeof platform.platform === "string" && Array.isArray(platform.entries) && platform.entries.every((entry) => sized(entry) && typeof entry.name === "string" && nullableString(entry.lastUsedAt) && nullableString(entry.packageVersion) && nullableString(entry.xcodeBuildVersion) && typeof entry.inUse === "boolean" && [
+		null,
+		"lease",
+		"lock",
+		"unreadable"
+	].includes(entry.inUseReason))) && Array.isArray(workspaces) && workspaces.every((entry) => sized(entry) && nullableString(entry.projectRoot)) && (hosted === null || sized(hosted) && count$1(hosted.sessions));
+}
+//#endregion
+//#region state/swiftpm-cache-usage.ts
+function swiftpmCacheUsageFile() {
+	return join(configDir(), "swiftpm-cache-usage.json");
+}
+function readSwiftpmCacheUsage() {
+	const value = readJsonObject(swiftpmCacheUsageFile());
+	if (!value || value.version !== 1 || typeof value.measuredAt !== "string" || !Number.isFinite(Date.parse(value.measuredAt)) || typeof value.dir !== "string" || typeof value.present !== "boolean" || typeof value.complete !== "boolean" || !(value.bytes === null || typeof value.bytes === "number" && Number.isFinite(value.bytes) && value.bytes >= 0)) return null;
+	return value;
+}
+//#endregion
 //#region state/paths.ts
 function getConfigPath() {
 	return join(configDir(), "config.json");
@@ -59,6 +381,9 @@ function configLockPath() {
 function workspaceMetadataFile(projectRoot) {
 	return join(workspaceStateDir(projectRoot), "workspace.json");
 }
+function workspaceAgentDeviceDir(projectRoot) {
+	return join(workspaceStateDir(projectRoot), "agent-device");
+}
 function workspaceLogsDir(projectRoot) {
 	return join(workspaceStateDir(projectRoot), "logs");
 }
@@ -164,6 +489,39 @@ function deviceViewersDir() {
 function statsFile() {
 	return join(configDir(), "stats.json");
 }
+function maintenanceDir() {
+	return join(configDir(), "maintenance");
+}
+function maintenanceStateFile() {
+	return join(maintenanceDir(), "state.json");
+}
+function maintenanceAttemptFile() {
+	return join(maintenanceDir(), "attempt.json");
+}
+function maintenanceNdjsonFile() {
+	return join(maintenanceDir(), "maintenance.ndjson");
+}
+function maintenanceChildLogFile() {
+	return join(maintenanceDir(), "child.log");
+}
+function maintenanceRunClaims() {
+	return join(maintenanceDir(), "run.claims");
+}
+function archiveRoot() {
+	return join(configDir(), "archive");
+}
+function archiveDir(id) {
+	return join(archiveRoot(), id);
+}
+function archiveLock() {
+	return join(archiveRoot(), ".lock");
+}
+function serverSetupDir() {
+	return join(configDir(), "server", "setup");
+}
+function setupJournalFile(hash) {
+	return hash.length === 64 && /^[a-f0-9]{64}$/.test(hash) ? join(serverSetupDir(), `${hash}.json`) : null;
+}
 //#endregion
 //#region state/config.ts
 function withConfigLock(fn) {
@@ -288,6 +646,66 @@ function findProjectByMetroPort(port) {
 	return null;
 }
 //#endregion
+//#region state/tailnet.ts
+const DEFAULT_SERVE_PORT = 7443;
+const TAILNET_MACHINE_PATTERN = "^[A-Za-z0-9][A-Za-z0-9.-]*(?::(?!0+$)(?:[0-5]?[0-9]{1,4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5]))?$";
+function parseMachine(entry) {
+	if (!(/* @__PURE__ */ new RegExp("^[A-Za-z0-9][A-Za-z0-9.-]*(?::(?!0+$)(?:[0-5]?[0-9]{1,4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5]))?$")).test(entry.trim())) return null;
+	const [name, port] = entry.trim().split(":");
+	return {
+		name: name.toLowerCase(),
+		port: port === void 0 ? DEFAULT_SERVE_PORT : Number(port)
+	};
+}
+/**
+* The one peer in `tailscale status --json` whose MagicDNS name is `name` or starts with `name.`. `ID` there is
+* the node's StableID, the same value `tailscale whois` reports as `Node.StableID`.
+*/
+function findPeer(status, name) {
+	const found = (isJsonObject(status) && isJsonObject(status.Peer) ? Object.values(status.Peer) : []).flatMap((peer) => {
+		if (!isJsonObject(peer) || typeof peer.ID !== "string" || typeof peer.DNSName !== "string") return [];
+		const dnsName = peer.DNSName.replace(/\.$/, "").toLowerCase();
+		const addresses = Array.isArray(peer.TailscaleIPs) ? peer.TailscaleIPs.filter((ip) => typeof ip === "string") : [];
+		const address = addresses.find((ip) => !ip.includes(":")) ?? addresses[0];
+		if (!address || !(dnsName === name || dnsName.startsWith(`${name}.`))) return [];
+		return [{
+			nodeId: peer.ID,
+			dnsName,
+			address
+		}];
+	});
+	if (found.length === 0) return "missing";
+	return found.length === 1 ? found[0] : "ambiguous";
+}
+/**
+* Connects to the pinned node's own tailnet address rather than resolving its name, so the socket reaches the
+* node whose ID was just checked. `tailscale serve` still needs the MagicDNS name for TLS (SNI and certificate)
+* and for its Host routing.
+*/
+function endpoint(peer, port) {
+	const address = peer.address.includes(":") ? `[${peer.address}]` : peer.address;
+	const suffix = port === 443 ? "" : `:${port}`;
+	return {
+		url: `wss://${address}${suffix}`,
+		servername: peer.dnsName,
+		host: `${peer.dnsName}${suffix}`
+	};
+}
+/**
+* The endpoint of a paired machine's pinned node, or why Stim does not connect to it. The name must still
+* resolve to exactly the pinned node; the token is never sent anywhere else.
+*/
+function pinnedEndpoint(credential, current) {
+	const parsed = parseMachine(credential.machine);
+	if (!parsed) return `${credential.machine} is not a tailnet name`;
+	if (!isJsonObject(current)) return "Tailscale is not running";
+	const peer = findPeer(current, parsed.name);
+	if (peer === "missing") return `no peer on this tailnet is named ${parsed.name}`;
+	if (peer === "ambiguous") return `several tailnet peers match ${parsed.name}`;
+	if (peer.nodeId !== credential.nodeId) return `${peer.dnsName} is now node ${peer.nodeId}, not the pinned ${credential.nodeId}; run stim doctor`;
+	return endpoint(peer, parsed.port);
+}
+//#endregion
 //#region state/hosted-macos.ts
 /** App slots one host offers; a slot names the host-assigned bundle id `<bundleId>.hosted<slot>`. */
 const HOSTED_MACOS_APP_SLOTS = 64;
@@ -317,11 +735,11 @@ const AGENT_PATH = /^\/device-host\/agent\/[a-f0-9-]{36}\/$/;
 const LEASE_NAME = /^[A-Za-z0-9._-]{1,128}$/;
 const LEASE_DEVICE_KEY = /^[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+)+@[1-9][0-9]{0,9}$/;
 function parseHostedAgentLease(value) {
-	if (!isJsonObject(value) || Object.keys(value).length !== 4 || ![
+	if (!isJsonObject(value) || Object.keys(value).length !== (value.backend === "ios-instance" ? 5 : 4) || ![
 		value.tenant,
 		value.runId,
 		value.clientId
-	].every((name) => typeof name === "string" && LEASE_NAME.test(name)) || typeof value.deviceKey !== "string" || !LEASE_DEVICE_KEY.test(value.deviceKey)) return null;
+	].every((name) => typeof name === "string" && LEASE_NAME.test(name)) || typeof value.deviceKey !== "string" || !(value.backend === "ios-instance" ? /^ios:mobile:[a-fA-F0-9-]{36}$/.test(value.deviceKey) : value.backend === void 0 && LEASE_DEVICE_KEY.test(value.deviceKey))) return null;
 	return value;
 }
 /** A grant naming a driver this client does not know is not usable; it parses as null. */
@@ -345,7 +763,7 @@ function parseHostedAgentAccess(value) {
 		driver: "none",
 		setting: "hosting.agentDriver"
 	} : null;
-	if (value.driver !== "agent-device" || typeof value.remoteConfig !== "string" || !value.remoteConfig.startsWith("/") || typeof value.command !== "string" || !value.command || Object.keys(value).length !== 3) return null;
+	if (value.driver !== "agent-device" || typeof value.remoteConfig !== "string" || !isAbsolute(value.remoteConfig) || typeof value.command !== "string" || !value.command || Object.keys(value).length !== 3) return null;
 	return {
 		driver: "agent-device",
 		remoteConfig: value.remoteConfig,
@@ -516,9 +934,13 @@ const SETTINGS = [
 	},
 	{
 		key: "ios.remote",
-		type: REMOTE,
+		type: {
+			kind: "string",
+			pattern: TAILNET_MACHINE_PATTERN,
+			patternHelp: "eas, proxy, auto, or a tailnet machine name"
+		},
 		scopes: PROJECT,
-		description: "Default remote backend for iOS"
+		description: "Default iOS remote target: eas, proxy, or an approved Mac in hosting.machines; auto is not available yet"
 	},
 	{
 		key: "ios.simslimProfile",
@@ -751,6 +1173,79 @@ const SETTINGS = [
 		env: "STIM_RECORDING",
 		description: "Let stim-server record device screens for replay; false stops it and deletes the recordings"
 	},
+	{
+		key: "archive.enabled",
+		type: BOOLEAN,
+		scopes: EVERY,
+		default: true,
+		env: "STIM_ARCHIVE_ENABLED",
+		scopedHomeValue: false,
+		description: "Keep workspace history on removal; false under STIM_HOME unless explicitly enabled"
+	},
+	{
+		key: "archive.maxAgeDays",
+		type: CAPACITY,
+		scopes: MACHINE,
+		default: 30,
+		env: "STIM_ARCHIVE_MAX_AGE_DAYS",
+		description: "Days to keep archived workspace records; 0 keeps nothing"
+	},
+	{
+		key: "archive.maxCount",
+		type: CAPACITY,
+		scopes: MACHINE,
+		default: 200,
+		env: "STIM_ARCHIVE_MAX_COUNT",
+		description: "Archived workspace count; oldest records go first, 0 keeps nothing"
+	},
+	{
+		key: "archive.maxTotalGb",
+		type: GIGABYTES,
+		scopes: MACHINE,
+		default: 5,
+		env: "STIM_ARCHIVE_MAX_TOTAL_GB",
+		description: "Total archived bytes in binary GB; 0 keeps no artifacts"
+	},
+	{
+		key: "archive.logs.maxAgeDays",
+		type: CAPACITY,
+		scopes: MACHINE,
+		default: 14,
+		env: "STIM_ARCHIVE_LOGS_MAX_AGE_DAYS",
+		description: "Days to keep archived logs; 0 keeps none"
+	},
+	{
+		key: "archive.logs.maxMbPerWorkspace",
+		type: GIGABYTES,
+		scopes: MACHINE,
+		default: 100,
+		env: "STIM_ARCHIVE_LOGS_MAX_MB_PER_WORKSPACE",
+		description: "Archived logs per workspace in binary MB; 0 keeps none"
+	},
+	{
+		key: "archive.recordings.maxAgeDays",
+		type: CAPACITY,
+		scopes: MACHINE,
+		default: 3,
+		env: "STIM_ARCHIVE_RECORDINGS_MAX_AGE_DAYS",
+		description: "Days to keep archived recordings; 0 keeps none"
+	},
+	{
+		key: "archive.recordings.maxTotalGb",
+		type: GIGABYTES,
+		scopes: MACHINE,
+		default: 2,
+		env: "STIM_ARCHIVE_RECORDINGS_MAX_TOTAL_GB",
+		description: "Archived recordings in binary GB; 0 keeps none"
+	},
+	{
+		key: "archive.agentActions.maxAgeDays",
+		type: CAPACITY,
+		scopes: MACHINE,
+		default: 7,
+		env: "STIM_ARCHIVE_AGENT_ACTIONS_MAX_AGE_DAYS",
+		description: "Days to keep archived agent-device sessions; 0 keeps none"
+	},
 	{
 		key: "worktree.exclude",
 		type: { kind: "strings" },
@@ -849,6 +1344,179 @@ const SETTINGS = [
 		scopedHomeValue: 0,
 		description: "Live workspaces before idle ones are reclaimed; unset or 0 means no limit"
 	},
+	{
+		key: "maintenance.mode",
+		type: {
+			kind: "choice",
+			choices: ["off", "report"]
+		},
+		scopes: MACHINE,
+		default: "report",
+		env: "STIM_MAINTENANCE",
+		scopedHomeValue: "off",
+		ciValue: "off",
+		description: "Automatic resource maintenance. report measures, plans and logs what it would do and never deletes or stops anything; off disables it. Off under STIM_HOME or CI unless STIM_MAINTENANCE is set"
+	},
+	{
+		key: "maintenance.pressureCheckMinutes",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 1
+		},
+		scopes: MACHINE,
+		default: 1,
+		env: "STIM_MAINTENANCE_PRESSURE_CHECK_MINUTES",
+		description: "Disk and memory check interval in minutes"
+	},
+	{
+		key: "maintenance.sizeCheckMinutes",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 1
+		},
+		scopes: MACHINE,
+		default: 60,
+		env: "STIM_MAINTENANCE_SIZE_CHECK_MINUTES",
+		description: "Directory size check interval in minutes"
+	},
+	{
+		key: "maintenance.maxLoadPerCore",
+		type: {
+			kind: "number",
+			exclusiveMinimum: 0
+		},
+		scopes: MACHINE,
+		default: 4,
+		env: "STIM_MAINTENANCE_MAX_LOAD_PER_CORE",
+		description: "Defer size scans above this one-minute load per CPU"
+	},
+	{
+		key: "maintenance.logMaxMb",
+		type: {
+			kind: "number",
+			exclusiveMinimum: 0
+		},
+		scopes: MACHINE,
+		default: 1,
+		env: "STIM_MAINTENANCE_LOG_MAX_MB",
+		description: "Machine maintenance log rotation size in MiB"
+	},
+	{
+		key: "maintenance.logRetentionDays",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 1
+		},
+		scopes: MACHINE,
+		default: 30,
+		env: "STIM_MAINTENANCE_LOG_RETENTION_DAYS",
+		description: "Retention of the rotated machine maintenance log in days"
+	},
+	{
+		key: "maintenance.logChecks",
+		type: BOOLEAN,
+		scopes: MACHINE,
+		default: false,
+		env: "STIM_MAINTENANCE_LOG_CHECKS",
+		description: "Write debug check records and routine skips"
+	},
+	{
+		key: "maintenance.memoryPressureLevel",
+		type: {
+			kind: "choice",
+			choices: [
+				"warning",
+				"critical",
+				"off"
+			]
+		},
+		scopes: MACHINE,
+		default: "warning",
+		env: "STIM_MAINTENANCE_MEMORY_PRESSURE_LEVEL",
+		description: "Lowest macOS memory pressure level considered; off disables memory pressure reporting"
+	},
+	{
+		key: "maintenance.memoryWarningMinutes",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 10,
+		env: "STIM_MAINTENANCE_MEMORY_WARNING_MINUTES",
+		description: "Consecutive warning minutes before memory counts as pressure"
+	},
+	{
+		key: "maintenance.minAvailableMemoryGb",
+		type: {
+			kind: "number",
+			minimum: 0
+		},
+		scopes: MACHINE,
+		env: "STIM_MAINTENANCE_MIN_AVAILABLE_MEMORY_GB",
+		description: "Available-memory threshold in GiB; unset is 10% of RAM"
+	},
+	{
+		key: "maintenance.capTargetPercent",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 10,
+			maximum: 100
+		},
+		scopes: MACHINE,
+		default: 80,
+		env: "STIM_MAINTENANCE_CAP_TARGET_PERCENT",
+		description: "Plan toward this percentage of each size cap"
+	},
+	{
+		key: "maintenance.workspaceOutputsMaxGb",
+		type: {
+			kind: "number",
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 20,
+		env: "STIM_MAINTENANCE_WORKSPACE_OUTPUTS_MAX_GB",
+		description: "Workspace build-output cap in GiB; 0 means no cap"
+	},
+	{
+		key: "caches.buildCacheMaxGb",
+		type: {
+			kind: "number",
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 10,
+		env: "STIM_CACHES_BUILD_CACHE_MAX_GB",
+		description: "Shared native build-cache cap in GiB; 0 means no cap"
+	},
+	{
+		key: "caches.metroCacheMaxGb",
+		type: {
+			kind: "number",
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 5,
+		env: "STIM_CACHES_METRO_CACHE_MAX_GB",
+		description: "Combined Metro transform-cache cap in GiB; 0 means no cap"
+	},
+	{
+		key: "caches.swiftCompilationCacheMaxGb",
+		type: {
+			kind: "number",
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 15,
+		env: "STIM_CACHES_SWIFT_COMPILATION_CACHE_MAX_GB",
+		description: "Swift compilation-cache cap in GiB; planned emptying is whole; 0 means no cap"
+	},
 	{
 		key: "gc.worktreeGraceMinutes",
 		type: CAPACITY,
@@ -889,7 +1557,7 @@ const SETTINGS = [
 		},
 		scopes: MACHINE,
 		default: "none",
-		description: "Tool this Mac starts so a client's coding agent can drive the macOS apps it hosts for that client; none starts nothing"
+		description: "Tool this Mac starts so a client's coding agent can drive the macOS apps and iOS simulators it hosts for that client; none starts nothing"
 	},
 	{
 		key: "server.acceptClientBuilds",
@@ -908,7 +1576,7 @@ const SETTINGS = [
 		key: "offload.machine",
 		type: {
 			kind: "string",
-			pattern: "^[A-Za-z0-9][A-Za-z0-9.-]*(?::(?!0+$)(?:[0-5]?[0-9]{1,4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5]))?$",
+			pattern: TAILNET_MACHINE_PATTERN,
 			patternHelp: "auto, local, or a tailnet machine name"
 		},
 		scopes: MACHINE,
@@ -1025,6 +1693,7 @@ function acceptsShape(setting, value) {
 function numberBounds(type) {
 	const noun = type.integer ? "a whole number" : "a number";
 	if (type.minimum !== void 0 && type.maximum !== void 0) return `${noun} from ${type.minimum} through ${type.maximum}`;
+	if (type.exclusiveMinimum !== void 0) return `${noun}, greater than ${type.exclusiveMinimum}`;
 	if (type.minimum !== void 0) return `${noun}, ${type.minimum} or more`;
 	return noun;
 }
@@ -1033,7 +1702,7 @@ function settingValueError(setting, value) {
 	if (!acceptsShape(setting, value)) return type.kind === "number" ? numberBounds(type) : expectedShape(type);
 	if (type.kind === "number") {
 		const number = value;
-		if (!Number.isFinite(number) || type.integer && !Number.isSafeInteger(number) || type.minimum !== void 0 && number < type.minimum || type.maximum !== void 0 && number > type.maximum) return numberBounds(type);
+		if (!Number.isFinite(number) || type.integer && !Number.isSafeInteger(number) || type.minimum !== void 0 && number < type.minimum || type.exclusiveMinimum !== void 0 && number <= type.exclusiveMinimum || type.maximum !== void 0 && number > type.maximum) return numberBounds(type);
 	}
 	if (type.kind === "path") {
 		const path = value;
@@ -1207,7 +1876,8 @@ function parseCredential(value) {
 		deviceId,
 		deviceToken,
 		state,
-		requestedAt
+		requestedAt,
+		...typeof value.ticketHash === "string" ? { ticketHash: value.ticketHash } : {}
 	};
 }
 function readBuildMachines() {
@@ -1375,7 +2045,8 @@ const SOURCES = [
 	"client",
 	"device",
 	"build",
-	"agent"
+	"agent",
+	"maintenance"
 ];
 function levelRank(level) {
 	const i = LEVELS.indexOf(level);
@@ -1486,7 +2157,7 @@ function bundleMarkerPlatform(record) {
 	return (/^RSC\((.+)\)$/.exec(tag)?.[1] ?? tag).toLowerCase();
 }
 function isAppDeviceRecord(record) {
-	return record.src === "device" && (record.event === "native_crash" || record.platform === "web");
+	return record.src === "device" && (record.event === "native_crash" || record.event === "hosted_native_log" || record.platform === "web");
 }
 function recordMatches(record, criteria = {}) {
 	if (!record) return false;
@@ -1495,6 +2166,7 @@ function recordMatches(record, criteria = {}) {
 	if (sources && sources.length > 0 && !sources.includes(record.src) && !(criteria.includeAppDeviceErrors && isAppDeviceRecord(record))) return false;
 	if (minLevel && levelRank(record.level) < levelRank(minLevel)) return false;
 	if (errorsOnly) {
+		if (record.src === "maintenance" && record.event !== "maintenance_failure") return false;
 		if (record.level !== "error" && record.level !== "fatal") return false;
 		if (typeof markerTs === "number") {
 			const ts = tsOf(record);
@@ -1559,6 +2231,11 @@ function readLogRecords(dir, include = () => true) {
 	for (const name of logFiles(dir).filter(include)) for (const record of readNdjsonGenerations(join(dir, name))) all.push(record);
 	return sortByTs(all);
 }
+const NATIVE_CRASH_LOG_PREFIX = "native-crash-";
+/** Reads the CLI timeline with retained native crash records after other records at the same timestamp. */
+function readLogTimeline(dir, records) {
+	return sortByTs([...records ?? readLogRecords(dir, (name) => !name.startsWith("native-crash-")), ...readLogRecords(dir, (name) => name.startsWith(NATIVE_CRASH_LOG_PREFIX))]);
+}
 function isExpoErrorContext(record, event) {
 	if (record.src !== "metro" || record.raw !== true || record.event !== event || typeof record.msg !== "string") return false;
 	return /^Code: \S/.test(record.msg) || /^\s*>?\s*\d+\s*\|/.test(record.msg) || /^\s*\|\s*\^/.test(record.msg) || /^Call Stack$/.test(record.msg) || /^\s+.+\([^()]+:\d+:\d+\)\s*$/.test(record.msg) || /^\s+at\s+\S+:\d+:\d+\s*$/.test(record.msg);
@@ -1739,6 +2416,16 @@ function queryLogs({ slot, dir, records, sources, minLevel, since, grep, tail, e
 	if (typeof tail === "number" && tail >= 0 && matched.length > tail) matched = matched.slice(matched.length - tail);
 	return errorContext ? includeBareErrorContext(all, attachExpoErrorContext(all, matched), launchTs, criteria.sinceTs) : matched;
 }
+/** Queries the JSON timeline, including Expo context fields on errors as `stim logs --json` does. */
+function queryJsonLogs(options = {}) {
+	const records = options.records ?? readLogTimeline(options.dir);
+	const matched = queryLogs({
+		...options,
+		records,
+		errorContext: false
+	});
+	return options.errorsOnly ? attachExpoErrorContext(records, matched, "field") : matched;
+}
 function tailRead(prev, size) {
 	const state = prev && typeof prev.offset === "number" ? prev : {
 		offset: 0,
@@ -1882,13 +2569,13 @@ function listDir(dir) {
 		return [];
 	}
 }
-/** The segments in one device directory, oldest first. Files that are not segments are left out. */
-function listSegments(dir) {
+/** The segments in one device directory, oldest first. Files that are not segments are left out; `closedOnly` excludes files still being written. */
+function listSegments(dir, closedOnly = false) {
 	const segments = [];
 	for (const name of listDir(dir)) {
 		const closed = SEGMENT.exec(name);
 		const part = closed ? null : PART.exec(name);
-		if (!closed && !part) continue;
+		if (!closed && (closedOnly || !part)) continue;
 		let stat;
 		try {
 			stat = statSync(join(dir, name));
@@ -1993,6 +2680,7 @@ function leafSchema(setting, scope) {
 		case "number":
 			schema.type = type.integer ? "integer" : "number";
 			if (type.minimum !== void 0) schema.minimum = type.minimum;
+			if (type.exclusiveMinimum !== void 0) schema.exclusiveMinimum = type.exclusiveMinimum;
 			if (type.maximum !== void 0) schema.maximum = type.maximum;
 			break;
 		case "boolean":
@@ -2835,8 +3523,8 @@ const PLATFORMS = ["ios", "android"];
 const OUTCOMES = ["hit", "cold"];
 const HISTORY_LIMIT = 10;
 function statsProjectKey({ root, commonDir, repoRoot }) {
-	if (commonDir && repoRoot && basename(commonDir) === ".git") return canonical(join(canonical(dirname(commonDir)), relative(canonical(repoRoot), canonical(root))));
-	return canonical(root);
+	if (commonDir && repoRoot && basename(commonDir) === ".git") return canonical$1(join(canonical$1(dirname(commonDir)), relative(canonical$1(repoRoot), canonical$1(root))));
+	return canonical$1(root);
 }
 /** Placement counts for the local calendar day of `now`, per-machine totals, and the retained placements. */
 function offloadSummary(record, now) {
@@ -2988,6 +3676,7 @@ function normalizePlacement(value) {
 	if (!PLACEMENT_DECISIONS.includes(decision) || !PLATFORMS.includes(platform)) return [];
 	if (typeof reason !== "string" || typeof project !== "string") return [];
 	const buildMs = wholeMs(value.buildMs);
+	const slotWaitMs = wholeMs(value.slotWaitMs);
 	const localEstimateMs = wholeMs(value.localEstimateMs);
 	return [{
 		at: timestamp(value.at),
@@ -2997,6 +3686,7 @@ function normalizePlacement(value) {
 		reason,
 		...typeof machine === "string" && machine !== "" ? { machine } : {},
 		...buildMs > 0 ? { buildMs } : {},
+		...slotWaitMs > 0 ? { slotWaitMs } : {},
 		...localEstimateMs > 0 ? { localEstimateMs } : {},
 		...value.failed === true ? { failed: true } : {}
 	}];
@@ -3095,7 +3785,7 @@ function count(value) {
 function timestamp(value) {
 	return typeof value === "string" && value !== "" ? value : (/* @__PURE__ */ new Date(0)).toISOString();
 }
-function canonical(path) {
+function canonical$1(path) {
 	try {
 		return realpathSync.native(path);
 	} catch {
@@ -3132,7 +3822,9 @@ function readStatsReport(key, now) {
 				ios: record?.machine.ios ?? null,
 				android: record?.machine.android ?? null
 			},
-			offload: offloadSummary(record, now)
+			offload: offloadSummary(record, now),
+			agentDevice: readAgentDeviceUsage(),
+			swiftpmCache: readSwiftpmCacheUsage()
 		},
 		note
 	};
@@ -3309,16 +4001,30 @@ function readHostedDevice(home, platform = "ios") {
 	if (!device) throw new Error("The hosted device record is malformed.");
 	return device;
 }
-/** Hosted sessions use isolated homes: only one exact device of their platform may appear in this ledger. */
-function assertHostedDeviceLedger(home, id, platform = "ios") {
+function readHostedDeviceLedger(home, options = {}) {
 	let value;
 	try {
 		value = JSON.parse(readFileSync(join(home, "created-devices.json"), "utf8"));
 	} catch (error) {
-		if (platform === "macos" && error.code === "ENOENT") return;
+		if (!options.required && error.code === "ENOENT") return null;
 		throw error;
 	}
-	if (!isJsonObject(value) || value.version !== 1 || !Array.isArray(value.ios) || value.ios.length !== (platform === "ios" ? 1 : 0) || platform === "ios" && value.ios[0] !== id || !Array.isArray(value.android) || value.android.length !== (platform === "android" ? 1 : 0) || platform === "android" && value.android[0] !== id || !Array.isArray(value.web) || value.web.length !== 0) throw new Error("The hosted device ownership ledger is missing, malformed or names another device.");
+	if (!isJsonObject(value) || value.version !== 1 || ![
+		"ios",
+		"android",
+		"web"
+	].every((key) => Array.isArray(value[key]) && value[key].every((id) => typeof id === "string"))) throw new Error("The hosted device ownership ledger is malformed.");
+	return value;
+}
+/** Hosted sessions use isolated homes: only one exact device of their platform may appear in this ledger. */
+function assertHostedDeviceLedger(home, id, platform = "ios", options = {}) {
+	const value = readHostedDeviceLedger(home, { required: platform !== "macos" });
+	if (!value && platform === "macos") return "empty";
+	if (value && !value.ios.length && !value.android.length && !value.web.length) {
+		if (platform === "macos" || options.allowEmpty) return "empty";
+	}
+	if (!value || value.ios.length !== (platform === "ios" ? 1 : 0) || platform === "ios" && value.ios[0] !== id || value.android.length !== (platform === "android" ? 1 : 0) || platform === "android" && value.android[0] !== id || value.web.length !== 0) throw new Error("The hosted device ownership ledger is missing, malformed or names another device.");
+	return "listed";
 }
 //#endregion
 //#region state/hosted-app.ts
@@ -3331,6 +4037,41 @@ function hostedAppArea(session, attempt, workerHome) {
 	if (workerHome) return join(workerHome, "..", "apps", attempt);
 	return join(deviceHostArea(session), "apps", attempt);
 }
+function hostedAppBlobs(session, workerHome) {
+	return join(workerHome ? join(workerHome, "..") : deviceHostArea(session), "blobs");
+}
+const verifiedBlobs = /* @__PURE__ */ new Map();
+/** Transfers cached verification after a rename, only for the same inode, size, mtime and digest. */
+function rememberHostedAppBlobRename(from, to, file) {
+	const previous = verifiedBlobs.get(from);
+	verifiedBlobs.delete(from);
+	const stat = lstatSync(to, { throwIfNoEntry: false });
+	if (!previous || !stat?.isFile() || stat.size !== file.size) return;
+	const prefix = `${stat.dev}:${stat.ino}:${stat.size}:${stat.mtimeMs}:`;
+	if (previous.startsWith(prefix) && previous.endsWith(`:${file.sha256}`)) verifiedBlobs.set(to, `${prefix}${stat.ctimeMs}:${file.sha256}`);
+}
+/** Checks regular blob bytes, including their size, before content-addressed reuse. */
+function validHostedAppBlob(path, file) {
+	const stat = lstatSync(path, { throwIfNoEntry: false });
+	if (!stat?.isFile() || stat.size !== file.size) return false;
+	const key = `${stat.dev}:${stat.ino}:${stat.size}:${stat.mtimeMs}:${stat.ctimeMs}:${file.sha256}`;
+	if (verifiedBlobs.get(path) === key) return true;
+	const hash = createHash("sha256");
+	const fd = openSync(path, "r");
+	try {
+		const buffer = Buffer.alloc(65536);
+		let count;
+		while (count = readSync(fd, buffer, 0, buffer.length, null)) hash.update(buffer.subarray(0, count));
+	} finally {
+		closeSync(fd);
+	}
+	const valid = hash.digest("hex") === file.sha256;
+	if (valid) {
+		if (verifiedBlobs.size >= 20001) verifiedBlobs.delete(verifiedBlobs.keys().next().value);
+		verifiedBlobs.set(path, key);
+	} else verifiedBlobs.delete(path);
+	return valid;
+}
 /** At most 32 plain arguments of 1024 characters (8192 in total), with no NUL, CR or LF. */
 function validHostedAppArguments(value) {
 	return Array.isArray(value) && value.length <= 32 && value.every((argument) => typeof argument === "string" && argument.length <= 1024 && !/[\0\r\n]/.test(argument)) && value.reduce((total, argument) => total + argument.length, 0) <= 8192;
@@ -3405,7 +4146,8 @@ function readHostedAppMetadata(session, attempt, workerHome) {
 }
 function readHostedApp(session, attempt, workerHome) {
 	const record = readHostedAppMetadata(session, attempt, workerHome);
-	const manifest = join(hostedAppArea(session, attempt, workerHome), "blobs", record.manifest.sha256);
+	const manifest = join(hostedAppBlobs(session, workerHome), record.manifest.sha256);
+	if (existsSync(manifest) && !validHostedAppBlob(manifest, record.manifest)) throw new Error("The hosted app manifest differs from its digest.");
 	const files = existsSync(manifest) ? parseHostedAppManifest(JSON.parse(readFileSync(manifest, "utf8"))) : [];
 	if (!files || !files.length && record.state !== "receiving") throw new Error("The hosted app manifest is missing or malformed.");
 	return {
@@ -3435,7 +4177,11 @@ function readDeviceHostMachines() {
 			"deviceToken",
 			"requestedAt"
 		].every((key) => typeof entry[key] === "string" && entry[key]) || entry.state !== "pending" && entry.state !== "approved" || machines.some((each) => each.machine === entry.machine)) throw new Error("Invalid device-host machine credential store");
-		machines.push(entry);
+		const { ticketHash, ...credential } = entry;
+		machines.push({
+			...credential,
+			...typeof ticketHash === "string" ? { ticketHash } : {}
+		});
 	}
 	return machines;
 }
@@ -3524,64 +4270,72 @@ function macosAppState(record) {
 	};
 }
 //#endregion
-//#region state/tailnet.ts
-const DEFAULT_SERVE_PORT = 7443;
-function parseMachine(entry) {
-	const match = /^([A-Za-z0-9][A-Za-z0-9.-]*?)(?::(\d{1,5}))?$/.exec(entry.trim());
-	if (!match) return null;
-	const port = match[2] === void 0 ? DEFAULT_SERVE_PORT : Number(match[2]);
-	return port >= 1 && port <= 65535 ? {
-		name: match[1].toLowerCase(),
-		port
-	} : null;
-}
-/**
-* The one peer in `tailscale status --json` whose MagicDNS name is `name` or starts with `name.`. `ID` there is
-* the node's StableID, the same value `tailscale whois` reports as `Node.StableID`.
-*/
-function findPeer(status, name) {
-	const found = (isJsonObject(status) && isJsonObject(status.Peer) ? Object.values(status.Peer) : []).flatMap((peer) => {
-		if (!isJsonObject(peer) || typeof peer.ID !== "string" || typeof peer.DNSName !== "string") return [];
-		const dnsName = peer.DNSName.replace(/\.$/, "").toLowerCase();
-		const addresses = Array.isArray(peer.TailscaleIPs) ? peer.TailscaleIPs.filter((ip) => typeof ip === "string") : [];
-		const address = addresses.find((ip) => !ip.includes(":")) ?? addresses[0];
-		if (!address || !(dnsName === name || dnsName.startsWith(`${name}.`))) return [];
-		return [{
-			nodeId: peer.ID,
-			dnsName,
-			address
-		}];
-	});
-	if (found.length === 0) return "missing";
-	return found.length === 1 ? found[0] : "ambiguous";
+//#region state/hosted-ios.ts
+function parseHostedIosPlacement(value) {
+	if (!isJsonObject(value) || typeof value.machine !== "string" || !parseMachine(value.machine) || typeof value.session !== "string" || !/^[a-f0-9-]{36}$/.test(value.session)) return null;
+	const device = parseHostedDevice(value.device);
+	return {
+		machine: value.machine,
+		session: value.session,
+		appAttempt: typeof value.appAttempt === "string" && /^[a-zA-Z0-9_-]{1,128}$/.test(value.appAttempt) ? value.appAttempt : "",
+		selected: value.machine,
+		device,
+		agent: parseHostedAgentAccess(value.agent) ?? {
+			driver: "none",
+			setting: "hosting.agentDriver"
+		}
+	};
 }
-/**
-* Connects to the pinned node's own tailnet address rather than resolving its name, so the socket reaches the
-* node whose ID was just checked. `tailscale serve` still needs the MagicDNS name for TLS (SNI and certificate)
-* and for its Host routing.
-*/
-function endpoint(peer, port) {
-	const address = peer.address.includes(":") ? `[${peer.address}]` : peer.address;
-	const suffix = port === 443 ? "" : `:${port}`;
+function hostedIosStatus(placement) {
 	return {
-		url: `wss://${address}${suffix}`,
-		servername: peer.dnsName,
-		host: `${peer.dnsName}${suffix}`
+		machine: placement.machine,
+		session: placement.session,
+		selected: placement.selected,
+		agent: placement.agent,
+		device: placement.device ? {
+			name: placement.device.deviceType,
+			runtime: placement.device.runtime
+		} : null
 	};
 }
-/**
-* The endpoint of a paired machine's pinned node, or why Stim does not connect to it. The name must still
-* resolve to exactly the pinned node; the token is never sent anywhere else.
-*/
-function pinnedEndpoint(credential, current) {
-	const parsed = parseMachine(credential.machine);
-	if (!parsed) return `${credential.machine} is not a tailnet name`;
-	if (!isJsonObject(current)) return "Tailscale is not running";
-	const peer = findPeer(current, parsed.name);
-	if (peer === "missing") return `no peer on this tailnet is named ${parsed.name}`;
-	if (peer === "ambiguous") return `several tailnet peers match ${parsed.name}`;
-	if (peer.nodeId !== credential.nodeId) return `${peer.dnsName} is now node ${peer.nodeId}, not the pinned ${credential.nodeId}; run stim doctor`;
-	return endpoint(peer, parsed.port);
+/** Includes unreadable placements so callers retain every recorded hosting slot. */
+function hostedIosRecords(state) {
+	const slots = isJsonObject(state?.deviceSlots) ? state.deviceSlots : {};
+	const records = {
+		default: state?.ios,
+		...Object.fromEntries(Object.entries(slots).map(([slot, value]) => [slot, isJsonObject(value) ? value.ios : void 0]))
+	};
+	return Object.fromEntries(Object.entries(records).flatMap(([slot, record]) => isJsonObject(record) && record.host !== void 0 ? [[slot, record.host]] : []));
+}
+function unreadableHostedIos(slot) {
+	const key = slot === "default" ? "ios.host" : `deviceSlots.${slot}.ios.host`;
+	return `The hosted iOS placement at workspace-state key ${key} is unreadable. Inspect ${key}.machine and ${key}.session before reconciling it.`;
+}
+function hostedIosPlacements(state) {
+	return Object.assign(Object.create(null), Object.fromEntries(Object.entries(hostedIosRecords(state)).flatMap(([slot, record]) => {
+		const placement = parseHostedIosPlacement(record);
+		return placement ? [[slot, placement]] : [];
+	})));
+}
+//#endregion
+//#region state/hosted-metro.ts
+const HOSTED_METRO_REQUESTS_KEY = "hostedMetroRequests";
+const HOSTED_METRO_GATEWAYS_KEY = "hostedMetroGateways";
+function hostedMetroRequests(state) {
+	const raw = state?.[HOSTED_METRO_REQUESTS_KEY];
+	if (!isJsonObject(raw)) return {};
+	return Object.fromEntries(Object.entries(raw).filter((entry) => {
+		const [session, value] = entry;
+		return /^[a-f0-9-]{36}$/.test(session) && isJsonObject(value) && typeof value.id === "string" && typeof value.machine === "string" && typeof value.address === "string" && isIP(value.address) !== 0 && typeof value.peer === "string" && isIP(value.peer) !== 0 && typeof value.secret === "string" && /^[a-f0-9]{64}$/.test(value.secret);
+	}));
+}
+function hostedMetroGateways(state) {
+	const raw = state?.[HOSTED_METRO_GATEWAYS_KEY];
+	if (!isJsonObject(raw)) return {};
+	return Object.fromEntries(Object.entries(raw).filter((entry) => {
+		const value = entry[1];
+		return isJsonObject(value) && typeof value.id === "string" && typeof value.processToken === "string" && (value.port === void 0 || typeof value.port === "number" && Number.isInteger(value.port) && value.port > 0 && value.port <= 65535) && (value.error === void 0 || typeof value.error === "string");
+	}));
 }
 //#endregion
 //#region state/hosted-logs.ts
@@ -3606,6 +4360,21 @@ function hostedMacosLogsDir(home) {
 		return null;
 	}
 }
+const hostedIosLogsDir = (home) => join(home, "ios-logs");
+/** The completed query window and overlap digests, or null for a missing, malformed or unreadable checkpoint. */
+function readHostedIosLogsCheckpoint(home) {
+	try {
+		const value = JSON.parse(readFileSync(join(hostedIosLogsDir(home), "checkpoint.json"), "utf8"));
+		if (!isJsonObject(value) || !Number.isSafeInteger(value.until) || value.until < 0 || value.windowMs !== void 0 && (!Number.isSafeInteger(value.windowMs) || value.windowMs < 1e3) || !Array.isArray(value.boundary) || !value.boundary.every((each) => typeof each === "string" && /^[a-f0-9]{64}$/.test(each))) return null;
+		return {
+			until: value.until,
+			boundary: value.boundary,
+			...typeof value.windowMs === "number" ? { windowMs: value.windowMs } : {}
+		};
+	} catch {
+		return null;
+	}
+}
 function readSpan(path, from, to) {
 	const fd = openSync(path, "r");
 	try {
@@ -3675,4 +4444,209 @@ function readLogsSince(dir, cursor) {
 	};
 }
 //#endregion
-export { ACTIVITY_RECENCY_BASES, AGENT_TOOLS, ANDROID_COMPILER_CACHE_CHOICES, ANDROID_EMULATOR_APPS, ANDROID_PCH_CHOICES, APP_PROCESS_STATES, BUILD_HISTORY_KEY, BUILD_HISTORY_LIMIT, BUILD_PHASES, BUILD_RESULTS, DEVICE_IDLE_SHUTDOWN_KEY, DEV_SERVER_STOP_REQUEST_KEY, ENDED_AGENT_RETENTION_MS, ERROR_SOURCES, HISTORY_LIMIT, HOSTED_AGENT_DRIVERS, HOSTED_APP_CHUNK_BYTES, HOSTED_LOGS_FIRST_BYTES, HOSTED_LOGS_PAGE_BYTES, HOSTED_MACOS_APP_SLOTS, IDLE_STOP_KEY, IOS_SIMULATOR_APPS, LAST_BUILD_KEYS, LEVELS, MACHINE_OWNER_KINDS, MEMORY_SOURCES, NATIVE_BUILD_STEPS, OFFLOAD_MODES, PHYSICAL_DEVICE_CONNECTIONS, PLACEMENT_DECISIONS, READY_PHASE_MS, RECORDING_CAP_BYTES, RECORDING_FOOTAGE_MS, RECORDING_PLATFORMS, REMOTE_DEVICE_BACKENDS, SETTINGS, SETTINGS_SCHEMA_FILE, SETTINGS_SCHEMA_URL, SETTING_GROUPS, SETTING_SCOPES, SOURCES, STATS_VERSION, STATUS_ISSUE_CODES, TUNNEL_MODES, WARM_KEY, WEB_PAGE_STATES, WEB_VIEWPORTS, WORKSPACE_AGENT_KEY, WORKSPACE_PHASES, WORKSPACE_STAGE_KINDS, acceptsShape, advanceTail, agentSessionOf, agentSessionsCacheFile, allMetroPorts, assertHostedDeviceLedger, attachExpoErrorContext, buildCriteria, buildDiagnostics, buildMachinesFile, buildMachinesLock, buildSlotPath, buildSlotsDir, buildWorkerRoot, bundleMarkerPlatform, capDrops, closedSegmentName, coerceSettingText, compileGrep, configCorruptRepair, configLockPath, countErrorEntries, createdDevicesFile, createdDevicesLock, decodeStats, deviceHostArea, deviceHostMachinesClaims, deviceHostMachinesFile, deviceHostMachinesLock, deviceHostRoot, deviceViewersDir, diskUsageCacheDir, diskUsageCacheFile, easMachineStateRoot, easSessionLedgerFile, easSessionLedgerLock, emulatorLogFile, endedAgentSessionOf, endpoint, expectedShape, fileSizes, findEnclosingWorktreeRoot, findPeer, findProjectByMetroPort, findProjectRoot, followLogs, footageDrops, getConcurrencyLimits, getConfigPath, getProject, getProjectSetting, getProjectSettings, getRepoSettings, gitMergeCacheDir, hostedAppArea, hostedAppAttempt, hostedConsolePort, hostedDeviceId, hostedMacosAppSlot, hostedMacosBundleId, hostedMacosLogsDir, isJsonObject, isLayeredSetting, isPathPrefix, isSensitiveReference, lastUseFrom, levelRank, listRecordedDevices, listSegments, listStatusCacheEntries, loadConfig, logFiles, machineCapacity, macosAppState, markerWindow, offloadSummary, openSegmentName, parseHostedAgentGrant, parseHostedAndroidDevice, parseHostedAppManifest, parseHostedAppOffer, parseHostedChoice, parseHostedDevice, parseHostedLogsCursor, parseHostedMacosChoice, parseHostedMacosDevice, parseHostedMacosPlacement, parseHostedNativeOffer, parseHostedOfferRequest, parseHostedPlatformDevice, parseHostedRequest, parseMachine, parseMacosRecord, parseMissReason, parseNdjsonLine, parseNdjsonText, parseSince, pinnedEndpoint, pullRequestCacheDir, pullRequestCacheFile, queryLogs, readAgentSessionsCache, readBuildDetail, readBuildHistory, readBuildMachines, readCreatedDevices, readDevServerStop, readDevServerStopRequest, readDeviceHostMachines, readDeviceIdleShutdowns, readDiskUsage, readEasSessionLedger, readEndedAgentSessions, readHostedApp, readHostedAppMetadata, readHostedDevice, readHostedMacosApp, readHostedSessions, readIdleStop, readJsonFile, readJsonObject, readLastBuilds, readLogRecords, readLogsSince, readMacosRecord, readNdjsonGenerations, readPullRequestCache, readRunEstimates, readStateFile, readStats, readStatsReport, readViewedDevices, readWarmRecord, readWorkspaceAgent, readWorkspaceState, recordMatches, recordedBytes, recordingDeviceName, recordingEnabled, saturation, settingDefinition, settingValueError, settingsJsonSchema, sharedCcache, sharedCompilationCache, sharedGradle, sharedPods, sortByTs, statsFile, statsProjectKey, stimBuildDigest, supervisorLogFile, supervisorPidFile, tailRead, trimSamples, tryAcquireBuildSlotClaim, validEasSessionClaim, validHostedAppArguments, wholePhases, withConfigLock, withDerivedFacts, withGitChip, withStateReadCache, workspaceBuildDetailFile, workspaceDerivedData, workspaceEndedAgentsFile, workspaceEndedAgentsLock, workspaceGradleBuild, workspaceLastUsed, workspaceLogErrorIndex, workspaceLogsDir, workspaceMetadataFile, workspaceRecordingsDir, workspaceStateFile, workspaceStateLock };
+//#region state/maintenance.ts
+const finite = (value) => typeof value === "number" && Number.isFinite(value);
+const nullableNumber = (value) => value === null || finite(value);
+const strings = (value) => Array.isArray(value) && value.every((entry) => typeof entry === "string");
+const KINDS = [
+	"would-clear-outputs",
+	"would-trim-cache",
+	"would-empty-cache",
+	"would-shutdown-device",
+	"would-stop-workspace"
+];
+/** Rejects missing, corrupt or unsupported payloads without throwing. */
+function parseMaintenanceState(value) {
+	if (!isJsonObject(value) || value.version !== 1 || !isJsonObject(value.lastAt)) return null;
+	if (!Object.values(value.lastAt).every(finite)) return null;
+	if (value.skipKeys !== void 0 && !strings(value.skipKeys)) return null;
+	if (value.deferredAt !== void 0 && (!isJsonObject(value.deferredAt) || !Object.values(value.deferredAt).every(finite))) return null;
+	if (!Array.isArray(value.sizes) || !value.sizes.every((size) => isJsonObject(size) && typeof size.name === "string" && typeof size.dir === "string" && finite(size.bytes) && finite(size.measuredAt) && [
+		"workspace-outputs",
+		"build-cache",
+		"metro-cache",
+		"compilation-cache",
+		"ccache",
+		"other"
+	].includes(String(size.category)) && (size.workspace === void 0 || typeof size.workspace === "string") && (size.blocked === void 0 || typeof size.blocked === "string") && (size.idleDays === void 0 || nullableNumber(size.idleDays)))) return null;
+	if (!Array.isArray(value.plan) || !value.plan.every((action) => isJsonObject(action) && KINDS.includes(String(action.kind)) && typeof action.target === "string" && finite(action.bytes) && typeof action.reason === "string" && (action.workspace === void 0 || typeof action.workspace === "string"))) return null;
+	if (!Array.isArray(value.recent) || !value.recent.every((record) => isJsonObject(record) && record.src === "maintenance" && finite(record.ts) && typeof record.msg === "string" && [
+		"debug",
+		"info",
+		"warn",
+		"error"
+	].includes(String(record.level)) && [
+		"maintenance_pass",
+		"maintenance_action",
+		"maintenance_skip",
+		"maintenance_failure",
+		"maintenance_check"
+	].includes(String(record.event)) && typeof record.pass === "string" && typeof record.trigger === "string" && record.mode === "report")) return null;
+	if (value.lastPass !== null && (!isJsonObject(value.lastPass) || !finite(value.lastPass.startedAt) || !finite(value.lastPass.durationMs) || typeof value.lastPass.trigger !== "string" || value.lastPass.mode !== "report" || value.lastPass.freedBytes !== 0 || value.lastPass.stopped !== 0 || !finite(value.lastPass.actions) || !strings(value.lastPass.blocked))) return null;
+	if (value.pressure !== null) {
+		const pressure = value.pressure;
+		if (!isJsonObject(pressure) || !Array.isArray(pressure.disk) || !pressure.disk.every((disk) => isJsonObject(disk) && typeof disk.volume === "string" && finite(disk.freeMb)) || !nullableNumber(pressure.warningSince) || !isJsonObject(pressure.memory) || ![
+			null,
+			"normal",
+			"warning",
+			"critical"
+		].includes(pressure.memory.level) || !nullableNumber(pressure.memory.availableBytes) || typeof pressure.memory.pressured !== "boolean") return null;
+	}
+	return value;
+}
+function readMaintenanceState() {
+	return parseMaintenanceState(readJsonObject(maintenanceStateFile()));
+}
+function readMaintenanceAttempt() {
+	const value = readJsonObject(maintenanceAttemptFile())?.attemptedAt;
+	return finite(value) ? value : void 0;
+}
+//#endregion
+//#region state/agent-device.ts
+function agentDeviceStateDirs(home = homedir()) {
+	const override = process.env.AGENT_DEVICE_STATE_DIR?.trim();
+	const dirs = /* @__PURE__ */ new Set([override ? resolve(override) : join(home, ".agent-device")]);
+	const workspaces = join(configDir(), "workspaces");
+	try {
+		for (const name of readdirSync(workspaces)) {
+			const dir = join(workspaces, name, "agent-device");
+			try {
+				if (statSync(dir).isDirectory()) dirs.add(dir);
+			} catch {}
+		}
+	} catch {}
+	return [...dirs];
+}
+//#endregion
+//#region state/archive.ts
+function readArchives() {
+	let names;
+	try {
+		names = readdirSync(archiveRoot());
+	} catch {
+		return [];
+	}
+	return names.flatMap((name) => {
+		const archive = readArchive(name);
+		return archive ? [archive] : [];
+	}).toSorted((a, b) => Date.parse(b.removedAt) - Date.parse(a.removedAt) || b.id.localeCompare(a.id));
+}
+function readArchive(id) {
+	if (!id || id.startsWith(".") || basename(id) !== id || id.includes("\0")) return null;
+	try {
+		if (!lstatSync(join(archiveRoot(), id)).isDirectory()) return null;
+	} catch {
+		return null;
+	}
+	const record = readJsonObject(join(archiveRoot(), id, "archive.json"));
+	if (!record || record.id !== id || [
+		"projectRoot",
+		"project",
+		"workspace",
+		"removedAt",
+		"removedBy"
+	].some((key) => typeof record[key] !== "string") || !Number.isFinite(Date.parse(record.removedAt)) || !isJsonObject(record.bytes) || !isJsonObject(record.expires) || !isJsonObject(record.worktree) || !isJsonObject(record.builds) || !Array.isArray(record.agents) || typeof record.version !== "number") return null;
+	const bytes = record.bytes;
+	if ([
+		"logs",
+		"recordings",
+		"agentActions",
+		"record",
+		"total"
+	].some((key) => typeof bytes[key] !== "number" || !Number.isFinite(bytes[key]) || bytes[key] < 0)) return null;
+	return record;
+}
+function archivedUsage(archives) {
+	const usage = {
+		count: archives.length,
+		bytes: 0,
+		byKind: {
+			logs: 0,
+			recordings: 0,
+			agentActions: 0,
+			record: 0
+		}
+	};
+	for (const archive of archives) {
+		usage.bytes += archive.bytes.total;
+		for (const kind of [
+			"logs",
+			"recordings",
+			"agentActions",
+			"record"
+		]) usage.byKind[kind] += archive.bytes[kind];
+	}
+	return usage;
+}
+function canonical(path) {
+	try {
+		return realpathSync(path);
+	} catch {
+		return path;
+	}
+}
+function linkReplacedArchives(archives, paths) {
+	const live = new Map(paths.map((path) => [canonical(path), path]));
+	return archives.map((archive) => {
+		const replacedBy = live.get(canonical(archive.projectRoot));
+		return replacedBy ? {
+			...archive,
+			replacedBy
+		} : archive;
+	});
+}
+function archiveEnabledValue(layer) {
+	if (!layer || typeof layer !== "object") return void 0;
+	return layer.archive?.enabled;
+}
+function archiveEnabled(env, layers) {
+	const definition = settingDefinition("archive.enabled");
+	const override = env[definition.env];
+	if ((!override || override === "") && env.STIM_HOME) return definition.scopedHomeValue;
+	const value = override !== void 0 && override !== "" ? coerceSettingText(definition, override) : layers.map(archiveEnabledValue).find((candidate) => candidate !== void 0) ?? definition.default;
+	const error = settingValueError(definition, value);
+	if (error) throw new Error(`Invalid ${override !== void 0 && override !== "" ? definition.env : definition.key}: ${error}`);
+	return value;
+}
+//#endregion
+//#region state/setup-journal.ts
+const capability = (value) => value === "build" || value === "device-host";
+const text = (value) => typeof value === "string" && value.length > 0;
+const knownKeys = (value, keys) => Object.keys(value).every((key) => keys.includes(key));
+function parseSetupJournal(value) {
+	if (!isJsonObject(value) || !knownKeys(value, [
+		"v",
+		"client",
+		"expiresAt",
+		"capabilities",
+		"steps",
+		"granted",
+		"done",
+		"exit"
+	]) || value.v !== 1 || !isJsonObject(value.client) || !knownKeys(value.client, ["nodeId"]) || !text(value.client.nodeId) || typeof value.expiresAt !== "string" || !Number.isFinite(Date.parse(value.expiresAt)) || !Array.isArray(value.capabilities) || !value.capabilities.every(capability) || !Array.isArray(value.steps) || !value.steps.every((step) => isJsonObject(step) && knownKeys(step, [
+		"id",
+		"state",
+		"title",
+		"detail",
+		"fix"
+	]) && text(step.id) && typeof step.state === "string" && [
+		"pending",
+		"running",
+		"ok",
+		"skipped",
+		"failed"
+	].includes(step.state) && text(step.title) && (step.detail === void 0 || typeof step.detail === "string") && (step.fix === void 0 || typeof step.fix === "string")) || !Array.isArray(value.granted) || !value.granted.every((grant) => isJsonObject(grant) && knownKeys(grant, ["capability", "id"]) && capability(grant.capability) && text(grant.id)) || typeof value.done !== "boolean" || value.exit !== void 0 && (!Number.isInteger(value.exit) || value.exit < 0)) return null;
+	return value;
+}
+function readSetupJournal(hash) {
+	const file = setupJournalFile(hash);
+	return file === null ? null : parseSetupJournal(readJsonObject(file));
+}
+function isJournalExpired(journal, now = Date.now()) {
+	return Date.parse(journal.expiresAt) < now;
+}
+function isSetupJournalPrunable(journal, now) {
+	return Date.parse(journal.expiresAt) + 36e5 < now;
+}
+//#endregion
+export { ACTIVITY_RECENCY_BASES, AGENT_TOOLS, ANDROID_COMPILER_CACHE_CHOICES, ANDROID_EMULATOR_APPS, ANDROID_PCH_CHOICES, APP_PROCESS_STATES, BUILD_HISTORY_KEY, BUILD_HISTORY_LIMIT, BUILD_PHASES, BUILD_RESULTS, DEVICE_IDLE_SHUTDOWN_KEY, DEV_SERVER_STOP_REQUEST_KEY, ENDED_AGENT_RETENTION_MS, ERROR_SOURCES, HISTORY_LIMIT, HOSTED_AGENT_DRIVERS, HOSTED_APP_CHUNK_BYTES, HOSTED_LOGS_FIRST_BYTES, HOSTED_LOGS_PAGE_BYTES, HOSTED_MACOS_APP_SLOTS, HOSTED_METRO_GATEWAYS_KEY, HOSTED_METRO_REQUESTS_KEY, IDLE_STOP_KEY, IOS_SIMULATOR_APPS, LAST_BUILD_KEYS, LEVELS, MACHINE_OWNER_KINDS, MEMORY_SOURCES, NATIVE_BUILD_STEPS, NATIVE_CRASH_LOG_PREFIX, OFFLOAD_MODES, PHYSICAL_DEVICE_CONNECTIONS, PLACEMENT_DECISIONS, READY_PHASE_MS, RECORDING_CAP_BYTES, RECORDING_FOOTAGE_MS, RECORDING_PLATFORMS, REMOTE_DEVICE_BACKENDS, SETTINGS, SETTINGS_SCHEMA_FILE, SETTINGS_SCHEMA_URL, SETTING_GROUPS, SETTING_SCOPES, SOURCES, STATS_VERSION, STATUS_ISSUE_CODES, TAILNET_MACHINE_PATTERN, TUNNEL_MODES, WARM_KEY, WEB_PAGE_STATES, WEB_VIEWPORTS, WORKSPACE_AGENT_KEY, WORKSPACE_PHASES, WORKSPACE_STAGE_KINDS, acceptsShape, advanceTail, agentDeviceStateDirs, agentDeviceUsageFile, agentSessionOf, agentSessionsCacheFile, allMetroPorts, archiveDir, archiveEnabled, archiveLock, archiveRoot, archivedUsage, assertHostedDeviceLedger, attachExpoErrorContext, buildCriteria, buildDiagnostics, buildMachinesFile, buildMachinesLock, buildSlotPath, buildSlotsDir, buildWorkerRoot, bundleMarkerPlatform, capDrops, closedSegmentName, coerceSettingText, compileGrep, configCorruptRepair, configLockPath, countErrorEntries, createAgentActionReader, createdDevicesFile, createdDevicesLock, decodeStats, deviceHostArea, deviceHostMachinesClaims, deviceHostMachinesFile, deviceHostMachinesLock, deviceHostRoot, deviceViewersDir, diskUsageCacheDir, diskUsageCacheFile, easMachineStateRoot, easSessionLedgerFile, easSessionLedgerLock, emulatorLogFile, endedAgentSessionOf, endpoint, expectedShape, fileSizes, findEnclosingWorktreeRoot, findPeer, findProjectByMetroPort, findProjectRoot, followLogs, footageDrops, getConcurrencyLimits, getConfigPath, getProject, getProjectSetting, getProjectSettings, getRepoSettings, gitMergeCacheDir, hostedAppArea, hostedAppAttempt, hostedAppBlobs, hostedConsolePort, hostedDeviceId, hostedIosLogsDir, hostedIosPlacements, hostedIosRecords, hostedIosStatus, hostedMacosAppSlot, hostedMacosBundleId, hostedMacosLogsDir, hostedMetroGateways, hostedMetroRequests, isJournalExpired, isJsonObject, isLayeredSetting, isPathPrefix, isSensitiveReference, isSetupJournalPrunable, lastUseFrom, levelRank, linkReplacedArchives, listRecordedDevices, listSegments, listStatusCacheEntries, loadConfig, logFiles, machineCapacity, macosAppState, maintenanceAttemptFile, maintenanceChildLogFile, maintenanceDir, maintenanceNdjsonFile, maintenanceRunClaims, maintenanceStateFile, markerWindow, offloadSummary, openSegmentName, parseHostedAgentAccess, parseHostedAgentGrant, parseHostedAndroidDevice, parseHostedAppManifest, parseHostedAppOffer, parseHostedChoice, parseHostedDevice, parseHostedIosPlacement, parseHostedLogsCursor, parseHostedMacosChoice, parseHostedMacosDevice, parseHostedMacosPlacement, parseHostedNativeOffer, parseHostedOfferRequest, parseHostedPlatformDevice, parseHostedRequest, parseMachine, parseMacosRecord, parseMaintenanceState, parseMissReason, parseNdjsonLine, parseNdjsonText, parseSetupJournal, parseSince, pinnedEndpoint, pullRequestCacheDir, pullRequestCacheFile, queryJsonLogs, queryLogs, readAgentDeviceUsage, readAgentDeviceUsageCache, readAgentSessionsCache, readArchive, readArchives, readBuildDetail, readBuildHistory, readBuildMachines, readCreatedDevices, readDevServerStop, readDevServerStopRequest, readDeviceHostMachines, readDeviceIdleShutdowns, readDiskUsage, readEasSessionLedger, readEndedAgentSessions, readHostedApp, readHostedAppMetadata, readHostedDevice, readHostedDeviceLedger, readHostedIosLogsCheckpoint, readHostedMacosApp, readHostedSessions, readIdleStop, readJsonFile, readJsonObject, readLastBuilds, readLogRecords, readLogTimeline, readLogsSince, readMacosRecord, readMaintenanceAttempt, readMaintenanceState, readNdjsonGenerations, readPullRequestCache, readRunEstimates, readSetupJournal, readStateFile, readStats, readStatsReport, readSwiftpmCacheUsage, readViewedDevices, readWarmRecord, readWorkspaceAgent, readWorkspaceState, recordMatches, recordedBytes, recordingDeviceName, recordingEnabled, rememberHostedAppBlobRename, saturation, serverSetupDir, settingDefinition, settingValueError, settingsJsonSchema, setupJournalFile, sharedCcache, sharedCompilationCache, sharedGradle, sharedPods, sortByTs, statsFile, statsProjectKey, stimBuildDigest, supervisorLogFile, supervisorPidFile, swiftpmCacheUsageFile, tailRead, trimSamples, tryAcquireBuildSlotClaim, unreadableHostedIos, validEasSessionClaim, validHostedAppArguments, validHostedAppBlob, wholePhases, withConfigLock, withDerivedFacts, withGitChip, withStateReadCache, workspaceAgentDeviceDir, workspaceBuildDetailFile, workspaceDerivedData, workspaceEndedAgentsFile, workspaceEndedAgentsLock, workspaceGradleBuild, workspaceLastUsed, workspaceLogErrorIndex, workspaceLogsDir, workspaceMetadataFile, workspaceRecordingsDir, workspaceStateFile, workspaceStateLock };